|Publication number||US6365987 B2|
|Application number||US 09/748,476|
|Publication date||Apr 2, 2002|
|Filing date||Dec 26, 2000|
|Priority date||Jun 25, 1998|
|Also published as||DE19828432A1, DE19828432C2, EP1089899A1, EP1089899B1, US20010005102, WO1999067110A1|
|Publication number||09748476, 748476, US 6365987 B2, US 6365987B2, US-B2-6365987, US6365987 B2, US6365987B2|
|Inventors||Ludwig Riederer, Claus Schmidt, Marten Swart|
|Original Assignee||Siemens Aktiengesellschaft|
|Export Citation||BiBTeX, EndNote, RefMan|
|Patent Citations (26), Referenced by (1), Classifications (17), Legal Events (5)|
|External Links: USPTO, USPTO Assignment, Espacenet|
This application is a continuation of copending International Application PCT/DE99/01622, filed Jun. 1, 1999, which designated the United States.
Field of the Invention
The invention relates to a device for triggering an occupant protection device of a motor vehicle.
U.S. Pat. No. 5,460,404 discloses an occupant protection device in which a series circuit contains an energy source, a first controllable output stage and a parallel circuit containing three series paths each having a firing element and a further controllable output stage. Each firing element is triggered when the common output stage and, at the same time, the firing stages individually assigned to the respective firing element are switched on. In this case, the individually assigned firing stages are controlled by a microprocessor, which identifies an impact on the basis of an evaluation of an acceleration signal. The common output stage is controlled by a customer-specific integrated circuit configuration which monitors the voltage drop across an electromechanical acceleration switch and can thus identify the closing of the switching contacts and hence the necessity of driving the common output stage.
Published, Non-Prosecuted German Patent Application DE 196 25 618 A1 discloses an electromechanical acceleration switch of a testable configuration. The acceleration switch has an acceleration-dependent bending electrode that can be moved in the direction of a fixed electrode. If the fixed electrode and the bending electrode make contact, then the micromechanically configured acceleration switch—between whose fixed and bending electrodes a voltage is present in the contactless state-emits a switching signal in the form of a current pulse, which is identified by a control circuit. Furthermore, such an acceleration switch has a test electrode which, upon application of a voltage, directs the bending electrode toward the fixed electrode on account of electrostatic forces and thus causes, in an electrically controlled manner, the acceleration switch electrodes to close.
If the electromechanical acceleration switch from U.S. Pat. No. 5,460,404 is replaced by a testable micromechanical acceleration switch in accordance with the Published, Non-Prosecuted German Patent Application DE 196 25 618 A1, then it is the case that during the testing of the acceleration switch, the firing of the firing elements is prevented owing to the non-activated output stages that are individually assigned to the firing elements. However, this holds true only insofar as the microprocessor operates without any faults and does not supply a control signal for turning on the output stages. However, if the microprocessor is defective during a test run for the acceleration switch, then there is the risk of occupant-endangering incorrect triggering of one or more restraint devices of the occupant protection system, such as airbags or seat-belt pretensioners.
It is accordingly an object of the invention to provide a device for triggering and a method for operating an occupant protection device of a motor vehicle using a testable acceleration switch which overcome the above-mentioned disadvantages of the prior art methods and devices of the general type, which prevents triggering of a restraint device during an acceleration switch test.
With the foregoing and other objects in view there is provided, in accordance with the invention, a device for triggering an occupant protection device of a motor vehicle.
The device contains an energy source, a firing element for the occupant protection device, and an electrically controllable switching device connected to the energy source and to the firing element for transmitting energy from the energy source to the firing element if the switching device is actuated. A control circuit is connected to the switching device for impact-dependent actuation of the switching device, and a testable acceleration switch generates a switching signal. The occupant protection device is triggered if the switching device is actuated and the testable acceleration switch supplies the switching signal to the switching device. A blocking device is connected between the switching device and the control unit, the blocking device prevents the actuation of the switching device during a test of the testable acceleration switch.
The invention provides a blocking device which prevents the actuation of the switching device during a test of the acceleration switch and whose hardware is preferably configured independently of the control circuit. For the duration of the acceleration switch test, that is to say at least for the duration in which the contacts of the acceleration switch are closed, the blocking device prevents triggering of the firing element, even if the switching device is driven on account of a trigger signal from the microprocessor.
By way of example, if the control circuit is configured as a microprocessor, then the blocking device is preferably not configured as a software function of the microprocessor but as an autonomous component, for example on a carrier configured separately from the microprocessor. This further reduces the probability of incorrect triggering.
In accordance with an added feature of the invention, a monitoring device is connected to the control circuit. The monitoring device generates an enable signal received by the switching device in dependence on an operating state of the control circuit that has been determined, and the switching device can be actuated by the control circuit only if the enable signal is present.
In accordance with an additional feature of the invention, the control circuit outputs an operating control signal; and the monitoring device is configured for checking the operating clock signal output by the control circuit, and the enable signal is output by the monitoring device as long as the operating clock signal has no irregularity.
In accordance with another feature of the invention, the blocking device receives the enable signal from the monitoring device and can interrupt the enable signal so that it is not received by the switching device.
In accordance with a further feature of the invention, the control circuit generates a test signal received by the testable acceleration switch and the blocking device, the blocking device being activated with the beginning of the test signal.
In accordance with another added feature of the invention, a timing element is connected to the testable acceleration switch, and the timing element supplies the switching signal, which has a defined time duration, if the testable acceleration switch is activated.
In accordance with another additional feature of the invention, the blocking device is deactivated at the end of the switching signal.
In accordance with another further feature of the invention, the blocking device is formed of hardware that is independent of hardware forming the control circuit.
With the foregoing and other objects in view there is also provided, in accordance with the invention, a method for operating an occupant protection device of a motor vehicle. The method includes the steps of:
triggering the occupant protection device if a testable acceleration switch supplies a switching signal and an electrically controllable switching device is actuated by a control circuit in an impact-dependent manner;
actuating and testing the testable acceleration switch; and
preventing the switching device from being actuated during the testing of the testable acceleration switch.
In accordance with an added feature of the invention, there are the steps of determining an operating state of the control circuit; and enabling the switching device in a manner dependent on the operating state that has been determined. The switching device only being able to be actuated if the switching device is enabled for actuation.
In accordance with another feature of the invention, there is the step of monitoring an operating clock signal of the control circuit and enabling the switching device as long as the operating clock signal has no irregularity.
In accordance with an additional feature of the invention, there is the step of interrupting the enabling of the switching device during the testing of the testable acceleration.
In accordance with a further feature of the invention, there is the step of generating a test signal for closing acceleration switch contacts of the testable accelerating switch and interrupting the enabling of the switching device at a beginning of the test signal.
In accordance with a concomitant feature of the invention, there is the step of providing the switching signal of the testable acceleration switch with a defined time duration and the interruption of the enabling of the switching device is cancelled with an end of the switching signal.
Other features which are considered as characteristic for the invention are set forth in the appended claims.
Although the invention is illustrated and described herein as embodied in a device for triggering and a method for operating an occupant protection device of a motor vehicle using a testable acceleration switch, it is nevertheless not intended to be limited to the details shown, since various modifications and structural changes may be made therein without departing from the spirit of the invention and within the scope and range of equivalents of the claims.
The construction and method of operation of the invention, however, together with additional objects and advantages thereof will be best understood from the following description of specific embodiments when read in connection with the accompanying drawings.
FIG. 1 is a block circuit diagram of a device according to the invention; and
FIG. 2 is a block circuit diagram of the device according to the invention.
In all the figures of the drawing, sub-features and integral parts that correspond to one another bear the same reference symbol in each case. Referring now to the figures of the drawing in detail and first, particularly, to FIG. 1 thereof, there is shown a circuit diagram of a device according to the invention for triggering an occupant protection device. An energy source 1, such as a battery, is disposed in series with an electromechanical acceleration switch 5, a first electrically controllable output stage 31, a firing element 2 of the occupant protection device and a second electrically controllable output stage 32. Applying current from the energy source 1 to the firing element 2 requires a controlled switch-on of a switching circuit, formed of the electrically controllable output stages 31 and 32, and controlled by a control circuit 4, which is preferably a microprocessor, as well as a simultaneous closing of contacts of the acceleration switch 5. It is incumbent upon the person skilled in the art to employ his ability to configure the circuit alternatively in such a way that energy is applied to the firing element 2 when the contacts of the acceleration switch 5 open or when the switching device is switched off.
The energy source 1, the control circuit 4, the acceleration switch 5, and the controllable output stages 31 and 32 are usually disposed in an airbag control unit in the motor vehicle. The airbag control unit is connected via leads 21 to the firing element 2 disposed in the occupant protection device. The controllable output stages 31 and 32 are switched on by trigger signals ls from the control circuit 4. In this case, the control unit 4 generates the trigger signals ls if the evaluation of an acceleration signal gs supplied by an acceleration sensor 8 has identified an impact severe enough to trigger the occupant protection device. In order that a trigger decision does not depend solely on the functionality of a single sensor and a single control circuit, occupant protection devices usually have an electromechanical acceleration switch whose bending arm with seismic mass as a bending electrode, upon the action of a minimum acceleration, closes a mating contact as a fixed electrode and thus enables current to flow in the firing circuit 1, 2, 5 according to FIG. 1.
The testable acceleration switch 5 is compelled, to close its contacts in a fashion prompted by a test signal ts from the control circuit 4. However, the contacts through the test signal ts can also be short-circuited in some other way in the test mode. The voltage between the contacts of the acceleration switch 5 is usually picked up during such a test by the control circuit 4, if the contacts close, a switching signal ss is generated. From the evaluation of the switching signal ss in the control circuit 4, it is possible to incur the functionality of the acceleration switch 5. If the voltage between the switching contacts does not collapse, for example, during such a test and if, as a result, no switching signal ss is generated, then the acceleration switch 5, which is open in is quiescent position, cannot be closed. The driver of the motor vehicle is informed of the fault state of the airbag control unit by a visual warning device, for example.
According to the invention, the controllable output stages are now blocked for the duration of the generated test signal in a way that prevents a switch-on even given the presence of the trigger signal ls from the control circuit. By way of example, if each output stage is a field-effect transistor controlled via a gate electrode, then the invention provides an AND gate as a blocking device, whose output is connected to the gate electrode of the respective output stage and to whose inputs the trigger signal ls and an inverted test signal /ts are passed. As a result, the output stages 31 and 32 are blocked for the duration of the acceleration switch test.
Instead of the controllable output stage configured as a transistor, it is possible to use any other electrically controllable switch with a sufficient current-carrying capacity. It is also possible to provide just a single controllable output stage in a firing circuit of the occupant protection device.
As an alternative, an input of the above-described AND gate is connected to the output of a flip-flop which, at its output, supplies a signal corresponding to the switching signal of the acceleration switch, the output of the flip-flop being occupied only when the switching signal ss is causally engendered by a test signal. The flip-flop is set by the test signal and reset in turn by a low state of the switching signal. A circuit of this type is advantageous particularly when the acceleration switch supplies the switching signal ss temporally beyond the action of the test signal ts, by way of example the contacts of the acceleration switch remaining stuck to one another on account of contamination. In this case, too, inadvertent triggering of the firing element 2 is prevented in the event of a defectively operating control circuit. The occupant is preferably informed of the state of the occupant protection system by an optical or acoustic warning device should a test signal ts engender a switching signal ss with a time duration longer than expected.
The blocking of the electrically controllable output stages 31 and 32 during an acceleration switch test is performed in a further alternative advantageous development in accordance with FIG. 1. A monitoring circuit 7 configured a so-called watchdog, is usually provided in an airbag control unit. The monitoring circuit 7 compares an operating clock signal as supplied by the control circuit 4 to a clock signal clock from a clock generator 71 assigned separately to the monitoring circuit 7. An operating clock signal “as” of the control circuit 4, on the other hand, is derived from a clock signal clock from a clock generator 41 assigned separately to the control circuit 4. The method of operation of the monitoring circuit 7 is briefly explained below. If a considerable deviation is determined between the operating clock signal “as” supplied by the control circuit 4 and a desired operating clock signal determined with the aid of the clock generator 71, then the control circuit 4 is reset by a reset signal rs. The purpose of this resetting is to allow the operating clock signal “as” of the control circuit 4 to settle back to the predetermined desired value. If it is ascertained that the operating clock signal “as” which clocks the control circuit 4 does not correspond to the predetermined value—if appropriate with tolerances—then an enable signal fs of the monitoring circuit 7 is interrupted beyond the generation of the reset signal rs. Normally, the enable signal fs is permanently present as long as the monitoring circuit 7 determines a tolerable operating clock signal “as” from the control circuit 4. The enable signal fs has the effect that the controllable output stages 31 and 32 can be turned on on account of the trigger signal ls. The enable signal fs of the monitoring circuit 7 is thus ANDed with the trigger signal from the control circuit 4. The background for blocking the output stages 31 and/or 32 in the event of a non-tolerable operating clock signal “as” is that a defective operation of the entire control circuit 4 is suspected in the event of a seriously incorrect operating clock signal. Moreover, such a defectively operating microprocessor tends to apply a high level to all the outlets, which would result in the undesired closing of the output stages 31 and 32.
According to the invention, the inverted test signal /ts is now appropriately ANDed with the enable signal fs from the monitoring circuit 7, so that the output stages 31 or 32 can generally be activated only outside the test mode. The required AND gate for logically combining the test signal with the enable signal is in each case identified by the reference symbol 63. The test-influenced enable signal fs' in FIG. 1 emerges from this signal logic combination and is then, in turn, ANDed with the trigger signal ls.
In an alternative form, the output of the above-described flip-flop is ANDed with the enable signal fs. If the output stage 31 or 32 is a field-effect transistor, then the output of the AND gate which logically combines the test-influenced enable signal fs' and the trigger signal ls is connected to the gate electrode of the output stage 31 or 32. The advantage of this development is that, with the monitoring circuit present, the hardware configuration for driving the output stages 31 and 32 need hardly be changed.
For all the configurations of the control of the output stages 31 or 32, it is advantageous that the trigger signals ls are logically combined with the signals ts, ss, fs or fs' which identify a test mode of the acceleration switch 5, using hardware which is independent of the hardware of the control circuit 4, with the result that defective operation of the control circuit cannot be transferred to the hardware of the blocking device.
FIG. 2 shows a further exemplary embodiment of the invention. In this case, the configuration according to FIG. 2 differs from the configuration according to FIG. 1 essentially in that the controllable output stages 31 and 32 are present as a switching device 3 in integrated form in an integrated firing circuit 9, which contains further diagnostic and test components and routines. The leads 21 proceeding from the integrated firing circuit 9 go to a firing element(s) 2. A further essential difference from the configuration according to FIG. 1 is, moreover, that the acceleration switch 5, in the event of the triggering of the firing element 2, is configured not to carry current but as a trigger switch which supplies a switching signal ss to the integrated firing circuit 9. In the integrated firing circuit 9, a logic combination is provided with applies sufficient energy to the firing elements 2 only when both the trigger signal ls from the control circuit 4 and the switching signal ss from the acceleration switch 5 are present. In the firing circuit 9, the logic combination can be effected by a corresponding series circuit of controllable output stages.
The configuration of the acceleration switch S as a trigger switch whose switching signal ss is forwarded in the low-level range has the advantage that the acceleration switch 5 does not have to have a high current-carrying capacity and, as a result, can preferably be configured in an integrated, micromechanical form. In accordance with FIG. 2, the acceleration switch 5 in this case again has a bending electrode 51 which acts under the action of an acceleration on a fixed electrode 52 and establishes with the latter a contact which, at a circuit point S4, changes the voltage which is fed as the switching signal ss to the firing circuit 9. On account of the tendency of such micromechanical acceleration switches 5 to bounce, the signal at the circuit point S4 is subsequently subject to the influence of a timing element 55 which prolongs the closing duration and supplies the switching signal ss of a defined temporal length in the event of an edge which is present on an input side and identifies the closing of the acceleration switch 5. The timing element 55 ensures that even at points in time when no switching signal ss is present at the circuit point S4 on account of bounce of the acceleration switch contacts 51 and 52, a trigger signal ls nevertheless leads to the firing of the firing elements. Furthermore, the acceleration switch 5 has a fixed electrode 53, which is driven by the test signal ts from the control circuit 4 and, on account of electrostatic forces, causes the bending electrode 51 to close with the fixed electrode 52. In this case, too, a switching signal is generated at the circuit point S4 and is fed as the switching signal ss with a defined time duration to the integrated firing circuit 9.
As in FIG. 1, the monitoring circuit 7 supplying an enable signal fs is provided for the control circuit 4 in FIG. 2 as well.
In this case, the blocking device 6 generates a test-influenced enable signal fs' for the firing circuit 9 in a manner dependent on the enable signal fs, the optionally inverted test signal ts or the switching signal ss. Thus, during normal operation—in contrast to the test mode—the enable signal fs is present as test-influenced enable signal fs' at the firing circuit 9. During an acceleration switch test, the test-influenced enable signal fs' is preferably interrupted with the beginning of the test signal, of the switching signal ss or of the signal at the circuit point S4. The interruption of the test-influenced enable signal fs' and thus the blocking of firing lasts at least until the switching signal ss has assumed its LOW state again.
In the firing circuit 9, the test-influenced enable signal fs' is once again logically combined with the trigger signal ls by an AND gate.
|Cited Patent||Filing date||Publication date||Applicant||Title|
|US4243971 *||Oct 9, 1979||Jan 6, 1981||Robert Bosch Gmbh||Test circuit for automotive passenger restraint systems|
|US4608501 *||Jan 9, 1985||Aug 26, 1986||Daimler-Benz Aktiengesellschaft||Tripping apparatus for an occupant protection apparatus in vehicles|
|US5182459 *||Jan 18, 1991||Jan 26, 1993||Zexel Corporation||Control system for vehicle safety device|
|US5261694 *||Jun 14, 1991||Nov 16, 1993||Automotive Systems Laboratory, Inc.||Reconfigurable air bag firing circuit|
|US5359515 *||May 16, 1990||Oct 25, 1994||Robert Bosch Gmbh||Vehicle occupant safety system and method for operating the same|
|US5389822 *||Apr 26, 1991||Feb 14, 1995||Messerschmitt-Bolkow-Blohm Gmbh||Triggering circuit for a safety device in motor vehicles|
|US5406127 *||Jun 4, 1992||Apr 11, 1995||Mitsubishi Denki Kabushiki Kaisha||Passenger protecting apparatus|
|US5433101||Jul 12, 1993||Jul 18, 1995||Ford Motor Company||Method and apparatus for self-testing a single-point automotive impact sensing system|
|US5460404||Feb 24, 1994||Oct 24, 1995||Autoliv Development Ab||Triggering system for airbags|
|US5493270 *||Jun 28, 1993||Feb 20, 1996||Nippondenso Co., Ltd.||Failure monitoring system for passenger restraint unit of automotive vehicle|
|US5656991 *||May 22, 1995||Aug 12, 1997||Trw Inc.||Apparatus for testing an actuatable restraint system|
|US5657831||Nov 28, 1995||Aug 19, 1997||Mitsubishi Denki Kabushiki Kaisha||Passenger protecting apparatus and actuating apparatus therefor|
|US5726887 *||Jul 6, 1995||Mar 10, 1998||Temic Telefunken Microelectronic Gmbh||Test procedure for a safety system in a motor vehicle|
|US5828138||Dec 2, 1996||Oct 27, 1998||Trw Inc.||Acceleration switch|
|US5845729 *||Dec 9, 1996||Dec 8, 1998||Delco Electronics Corp.||Logic level arming sensor for supplemental inflatable restraint|
|US5861681 *||Apr 18, 1997||Jan 19, 1999||Kansei Corporation||Occupant crash protection device for a vehicle|
|US5977653 *||Sep 8, 1998||Nov 2, 1999||Siemens Aktiengesellschaft||Configuration for controlling a restraining device, in particular for a motor vehicle|
|US6070113 *||Jun 18, 1997||May 30, 2000||Automotive Systems Laboratory, Inc.||Hybrid vehicle crash discrimination system|
|US6072247 *||Oct 23, 1998||Jun 6, 2000||Trw Inc.||Cantilevered acceleration switch responsive to acceleration parallel to plane of substrate upon which the switch is fabricated and methods|
|US6256562 *||Apr 30, 1999||Jul 3, 2001||Siemens Aktiengesellschaft||Control configuration for an occupant protection system for side collision protection in a vehicle|
|US6282941 *||Dec 28, 1998||Sep 4, 2001||Siemens Aktiengesellschaft||Impact detection device, in particular for a motor vehicle|
|DE2808872A1||Mar 2, 1978||Sep 13, 1979||Messerschmitt Boelkow Blohm||Ausloeseschaltung fuer eine sicherheitseinrichtung, vorzugsweise in kraftfahrzeugen, mit einer pruefschaltung|
|DE3924595A1||Jul 25, 1989||Jan 31, 1991||Becker Autoradio||Steueranordnung fuer ein rueckhaltesystem in kraftfahrzeugen|
|DE9001803U1||Feb 15, 1990||May 10, 1990||Siemens Ag, 1000 Berlin Und 8000 Muenchen, De||Title not available|
|DE19625618A||Title not available|
|EP0794094A2||Mar 1, 1997||Sep 10, 1997||TEMIC TELEFUNKEN microelectronic GmbH||Releasing circuit in particular for a safety critical occupant protection system for vehicles transporting people|
|Citing Patent||Filing date||Publication date||Applicant||Title|
|US6696840||Feb 27, 2002||Feb 24, 2004||Robert Bosch Gmbh||Device for triggering ignition circuits|
|U.S. Classification||307/10.1, 180/282, 280/735|
|International Classification||G05B9/02, B60R21/16, G01P15/135, B60R21/01, G01P21/02|
|Cooperative Classification||G05B9/02, B60R2021/01027, G01P15/135, B60R21/0173, G01P21/02|
|European Classification||G01P21/02, G01P15/135, G05B9/02, B60R21/017D|
|Feb 12, 2002||AS||Assignment|
|Sep 19, 2005||FPAY||Fee payment|
Year of fee payment: 4
|Nov 9, 2009||REMI||Maintenance fee reminder mailed|
|Apr 2, 2010||LAPS||Lapse for failure to pay maintenance fees|
|May 25, 2010||FP||Expired due to failure to pay maintenance fee|
Effective date: 20100402